Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/t8HbGCUUFDZ79HOoIDzniW_5CjE.roa
File: t8HbGCUUFDZ79HOoIDzniW_5CjE.roa (raw, json)
Hash identifier: bURUeHYTHQjo9pWgWM8FHgpTvl8hZ3bV5mZnZQ6g4Cs=
Subject key identifier: B7:C1:DB:18:25:14:14:36:7B:F4:73:A8:20:3C:E7:89:6F:F9:0A:31
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 019CF727D982066D9F14D3ECA3DD2190562C
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/t8HbGCUUFDZ79HOoIDzniW_5CjE.roa
Signing time: Mon 16 Mar 2026 14:58:29 +0000
ROA not before: Mon 16 Mar 2026 14:58:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202395
IP address blocks: 2a02:2a48::/32 maxlen: 32
2a0b:680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:27:d9:82:06:6d:9f:14:d3:ec:a3:dd:21:90:56:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Mar 16 14:58:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7c1db18251414367bf473a8203ce7896ff90a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cc:4c:b0:d6:2d:06:5c:31:af:dc:59:a2:c8:
55:21:5d:b1:9e:ea:67:82:ae:74:4d:51:56:0f:17:
8e:6c:86:d2:bb:20:d0:4f:a5:e1:75:c7:bc:06:73:
98:32:73:de:6e:92:28:aa:42:61:7c:dc:6a:8e:24:
4a:70:f9:a8:d4:ff:92:50:72:b7:64:63:be:56:a6:
80:52:f2:1e:62:e1:90:51:15:71:19:0b:0f:9a:b7:
a3:13:9f:16:7e:1c:0f:21:f5:4f:18:22:59:a2:c7:
24:d6:33:d9:9b:31:44:02:d3:70:ef:a2:b0:dc:e4:
33:b5:00:52:53:08:ed:e6:a2:a0:78:94:5d:1f:2c:
cb:c7:56:62:24:6b:5a:32:21:03:9a:8e:4a:d1:a6:
04:36:cd:4c:22:69:fd:a1:3a:28:cd:45:07:d6:4c:
f0:e0:ff:26:a5:f0:b4:29:15:25:19:ba:bd:c7:fc:
4e:74:d8:ee:64:58:44:da:7e:6d:c6:46:42:ef:81:
39:02:37:65:18:d9:68:ec:26:48:8c:48:24:0b:3a:
8f:54:6b:f9:d1:83:8b:17:19:14:fb:f0:5f:68:95:
2d:49:f8:c3:f8:e5:2a:07:c4:81:3d:1b:d8:f1:0b:
28:d8:24:d0:cf:fa:c3:0e:5e:2b:46:fa:6b:e0:ec:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C1:DB:18:25:14:14:36:7B:F4:73:A8:20:3C:E7:89:6F:F9:0A:31
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/t8HbGCUUFDZ79HOoIDzniW_5CjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2a48::/32
2a0b:680::/29
Signature Algorithm: sha256WithRSAEncryption
9f:7d:47:91:10:2f:e0:a2:9b:24:86:85:50:45:f2:c3:92:9b:
e0:b3:a2:15:5d:d0:43:90:a2:3b:87:84:c9:73:74:e7:1a:57:
91:b9:e2:3d:5f:89:0f:c3:6b:bc:09:d9:37:dc:09:08:b7:03:
41:a7:87:d2:30:f8:e6:85:ff:09:5c:59:6e:76:d9:3e:4a:dc:
d4:de:b4:57:40:96:ca:17:10:e7:6f:d3:d7:cd:35:cb:d7:15:
e4:9c:4a:19:1a:ca:8c:93:7b:47:44:b3:9c:31:2e:13:46:ba:
65:d1:5f:3b:e8:14:7a:95:2a:ed:cd:fa:92:0a:de:15:3f:75:
9b:4c:9b:04:42:e2:ef:16:5c:fa:e1:3b:41:99:51:8b:a1:57:
b3:a7:c3:47:f0:df:7c:00:ac:ec:ba:b7:0d:0a:d3:3f:c3:c7:
79:b9:ec:89:40:38:45:4b:cf:56:b0:32:a2:23:80:62:41:c5:
ba:fe:33:f0:5b:a5:d3:cd:e3:f3:30:83:db:b0:1d:dc:2e:b4:
10:fa:47:67:50:d3:22:5c:de:de:39:03:72:bc:3e:d1:12:af:
ab:52:4d:d4:22:4c:3b:d2:41:ef:6f:fd:a5:5b:c9:d1:74:11:
52:8f:e0:7f:82:ba:73:9a:de:54:f9:4f:5f:d5:9a:99:f1:ca:
10:22:5a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:11:35 2026 by rpki-client